Vulnerabilities (CVE)

Filtered by CWE-476
Total 5417 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-37187 1 Blosc 1 C-blosc2 2026-06-17 N/A 7.5 HIGH
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the zfp/blosc2-zfp.c zfp_acc_decompress. function.
CVE-2023-37186 1 Blosc 1 C-blosc2 2026-06-17 N/A 7.5 HIGH
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference in ndlz/ndlz8x8.c via a NULL pointer to memset.
CVE-2023-37185 1 Blosc 1 C-blosc2 2026-06-17 N/A 7.5 HIGH
C-blosc2 before 2.9.3 was discovered to contain a NULL pointer dereference via the function zfp_prec_decompress at zfp/blosc2-zfp.c.
CVE-2023-37039 2026-06-17 N/A 6.5 MEDIUM
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allow network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `RRC Establishment Clause` field.
CVE-2023-37038 1 Linuxfoundation 1 Magma 2026-06-17 N/A 6.5 MEDIUM
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` packet missing an expected `MME_UE_S1AP_ID` field.
CVE-2023-37037 1 Linuxfoundation 1 Magma 2026-06-17 N/A 6.5 MEDIUM
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `S1Setup Request` packet missing an expected `Supported TAs` field.
CVE-2023-37036 1 Linuxfoundation 1 Magma 2026-06-17 N/A 6.5 MEDIUM
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` packet missing an expected `ENB_UE_S1AP_ID` field.
CVE-2023-37035 2026-06-17 N/A 6.5 MEDIUM
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `S1Setup Request` packet missing an expected `Global eNB ID` field.
CVE-2023-37034 1 Linuxfoundation 1 Magma 2026-06-17 N/A 6.5 MEDIUM
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `TAI` field.
CVE-2023-37033 1 Linuxfoundation 1 Magma 2026-06-17 N/A 6.5 MEDIUM
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `EUTRAN_CGI` field.
CVE-2023-37031 1 Linuxfoundation 1 Magma 2026-06-17 N/A 6.5 MEDIUM
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `eNB Configuration Transfer` packet missing its required `Target eNB ID` field.
CVE-2023-37030 1 Linuxfoundation 1 Magma 2026-06-17 N/A 6.5 MEDIUM
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `eNB_UE_S1AP_ID` field.
CVE-2023-37028 1 Linuxfoundation 1 Magma 2026-06-17 N/A 6.5 MEDIUM
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Modification Indication` packet missing an expected `eNB_UE_S1AP_ID` field.
CVE-2023-37027 1 Linuxfoundation 1 Magma 2026-06-17 N/A 6.5 MEDIUM
Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Modification Indication` packet missing an expected `eNB_UE_S1AP_ID` field.
CVE-2023-37026 1 Linuxfoundation 1 Magma 2026-06-17 N/A 6.5 MEDIUM
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Release Response` packet missing an expected `MME_UE_S1AP_ID` field.
CVE-2023-37025 1 Linuxfoundation 1 Magma 2026-06-17 N/A 6.5 MEDIUM
A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Reset` packet missing an expected `ResetType` field.
CVE-2023-36709 1 Microsoft 9 Windows 10 1507, Windows 10 1809, Windows 10 21h2 and 6 more 2026-06-17 N/A 7.5 HIGH
Microsoft AllJoyn API Denial of Service Vulnerability
CVE-2023-36603 1 Microsoft 7 Windows 10 1809, Windows 10 21h2, Windows 10 22h2 and 4 more 2026-06-17 N/A 7.5 HIGH
Windows TCP/IP Denial of Service Vulnerability
CVE-2023-36602 1 Microsoft 12 Windows 10 1507, Windows 10 1607, Windows 10 1809 and 9 more 2026-06-17 N/A 7.5 HIGH
Windows TCP/IP Denial of Service Vulnerability
CVE-2023-36199 1 Skale 1 Sgxwallet 2026-06-17 N/A 7.5 HIGH
An issue in skalenetwork sgxwallet v.1.9.0 and below allows an attacker to cause a denial of service via the trustedGenerateEcdsaKey component.